2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-35033HIGH7.8A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configu...
CVE-2021-43775HIGH8.6Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnera...
CVE-2021-41281HIGH7.5Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with...
CVE-2021-38891HIGH7.5IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow...
CVE-2021-38890HIGH7.5IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remot...
CVE-2021-36335HIGH8.8Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privilege...
CVE-2021-36313HIGH7.2Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged at...
CVE-2021-36311HIGH7.8Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with...
CVE-2021-36301HIGH7.2Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Raca...
CVE-2021-36300HIGH8.2iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attack...
CVE-2021-36299HIGH8.1Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability...
CVE-2021-24892HIGH8.8Insecure Direct Object Reference in edit function of Advanced Forms (Free & Pro) before 1.6.9 allows authenticated remot...
CVE-2021-24877HIGH7.2The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a ...
CVE-2021-24644HIGH7.5The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the ...
CVE-2021-24641HIGH8.1The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative ac...
CVE-2021-43019HIGH7.8Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources lev...
CVE-2021-37102HIGH8.8There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default ce...
CVE-2021-37035HIGH7.5There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the ap...
CVE-2021-37034HIGH7.5There is an Unstandardized field names in Huawei Smartphone.Successful exploitation of this vulnerability may affect ser...
CVE-2021-37033HIGH7.5There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect...
CVE-2021-37031HIGH7.5There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the ap...
CVE-2021-37030HIGH7.5There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may aff...
CVE-2021-37026HIGH7.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi...
CVE-2021-37025HIGH7.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi...
CVE-2021-37024HIGH7.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability wi...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now